CVE-2020-5196: Incorrect Default Permissions

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permission to zip and download or unzip and upload files. There are multiple ways to bypass certain...

PT-2020-18297

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server Enterprise Edition versions prior to 11.0.3 Cerberus FTP Server Enterprise Edition versions prior to 10.0.18 Description The issue allows an authenticated attacker to bypass certain permissions, enabling them to create file...